Cyber Threat Intelligence Lead

---

Security is a fundamental priority with our Cyber Security Operations team within the Ontario Public Service (OPS). We are responsible in demonstrating security approach, giving direction on tasks and projects, surveying danger and vulnerabilities and ensuring the measures of proper security controls. Working to defend the OPS, its frameworks and information from cyber security assaults is our mandate.

PLEASE NOTE: Security Screening requirements are currently under review.
In a 7/24/365 environment, we are seeking a cyber-security professional who can provide leadership and subject matter expertise to a team of professionals performing cyber threat intelligence collection, analysis and the dissemination of prepared intelligence products to provide situational awareness and strategic recommendations to senior decision-makers through the delivery of timely and actionable intelligence to protect the province's information and assets against current and emerging cyber threats.

---

About the job

As the Cyber Threat Intelligence Lead, you will:

• Use subject matter expertise to enhance security monitoring and incident response team knowledge to support respective missions.
• Identify requirements and assist with the development and implementation of internal cyber threat intelligence training programs to ensure world class high-tech cyber security standards.
• Lead threat intelligence research and analysis on the intersection of geopolitical and security risks.
• Evaluate, analyze and synthesize multi-source information using all-source intelligence approach, satisfying a broad range of cyber threat requirements.
• Develop and maintain relationships with other threat-centric communities in the computer security and threat intelligence field to acquire and share threat intelligence information and to identify opportunities for collaboration.
• Lead teams by establishing and directing special projects, including task forces and working groups, to promote the awareness of cyber intelligence operations and the collection, tracking and identification of threat actors.

---

What you bring to the team

TECHNICAL KNOWLEDGE AND SKILLS:

You have demonstrated knowledge or experience with:

• Cyber security technologies, processes and practices, as well as cyber threat intelligence concepts, protocols and principles.
• Cyber intelligence analytical methodologies, tools and techniques (e.g. Kill Chain, Diamond Model, Indicators & Warnings, Probabilities Analysis, etc.) to lead the development of actionable intelligence and to categorize threat levels to prevent security issues.
• Data science and analytical techniques to aggregate, manipulate, mine and examine data from various sources in order to visualize and report on threat intelligence.
• Threat actor techniques related to reconnaissance, end-user attacks and network-based attacks, expanding foothold (pivoting), and hiding tracks

LEADERSHIP SKILLS:

• You can demonstrate leadership in providing direction and mentorship to technical and non-technical personnel within the cyber security operation environment.
• You have knowledge of project management methodology.
• You can set strategic objectives, take initiative and develop and implement guidelines, standards, policies, procedures and technical documentation for use by cyber security specialists.

INTERPERSONAL AND INFLUENCING SKILLS:

• You have relationship management skills to maintain internal and external contacts that focus on threat intelligence issues.
• You can present recommendations and provide technical advice/consultation to senior management and lead meetings.
• You have proven influencing skills to communicate intelligence-related concepts and recommendations to senior management and provide status and briefings of threat intelligence operational activities.

ANALYTICAL AND PROBLEM SOLVING SKILLS:

• You have analytical and problem solving skills to synthesize data and to present detailed intelligence briefing reports.
• You can rapidly evaluate and assess potentially imminent security situations, sensitive developments and complex threat issues.
• You can define, collect, analyze data, establish facts, draw valid conclusions and make fact-based decisions.

---

Additional information:

Note:

• T-TB-110377/17

---

Language requirements and assessment:
All external Ontario Public Service (OPS) job ads are posted in English and French. Check the "position(s) language" section at the top of each job ad for the language requirements. For all roles, candidates are assessed in English, the business language of the OPS. If the position is bilingual (English/French), you'll also need to pass a French-language proficiency test.

Exigences en matière de langue et évaluation:
Toutes les offres d'emploi externes de la fonction publique de l'Ontario (FPO) sont affichées en français et en anglais. Consultez la section « Langue du ou des postes » en haut de chaque offre d'emploi pour connaître les exigences linguistiques. Pour tous les postes, les candidats sont évalués en anglais, la langue d'affaires de la FPO. Si le poste est bilingue (anglais/français), vous devrez également passer un test de compétences linguistiques en français.